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IN THE CLAIMS : 

Please cancel claim 10 without prejudice. 

Please amend claims 1, 4, 11, 12, 15, 16, and 21 as 
indicated below. 

A listing of the status of all claims 1-21 in the present 
patent application is provided below. 

1 (Currently Amended) . A method for tracing source addresses of 
packets, the method comprising: 

identifying at least part of a source address of a packet; 

determining whether the at least part of the source address 
matches at least one source address recorded within a 
predetermined time period prior to arrival of the packet ; and 

routing the packet if the at least part of the source 

address matches at least one source address recorded within the 
predetermined time period prior to the arrival of the packet . 

2 (Original). The method according to claim 1, where the at 
least one source address is recorded in a hierarchical data 
structure . 

3 (Original) . The method according to claim 1, where a Last 
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Time Seen (LTS) value associated with each of the at least one 

source address is recorded. 



4 {Currently Amended) . The method according to claim 1^ further 
comprising : 



routing — the — packet — ±4 — the 

address matches — at — least one — sew 


-at — least 
?ee — address 


part — &€ — the — source 
i recorded within the 


pre determined — time — period — prior 


to the ar: 


rival — e€ — the — packet ; 



recording an arrival time of the packet. 

5 (Original) . The method according to claim 1, further 
comprising : 

routing the packet with a warning if the at least part of 
the source address does not match at least one source address 
recorded within the predetermined time period prior to the 
arrival of the packet; and 

recording the at least part of the source address and an 
arrival time of the packet. 

6 (Original) . The method according to claim 5, where the 
warning is recorded in a read-only medium. 
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7 (Original) . The method according to claim 1, further 
comprising issuing a warning and discarding the packet if the at 
least part of the source address does not match at least one 
source address recorded within the predetermined time period 
prior to the arrival of the packet. 

8 (Original). The method according to claim 7, where the 
warning is recorded in a read-only medium. 

9 (Original) . The method according to claim 1, where the source 
address of the packet is an internet protocol (IP) address. 

10 (Cancelled) . 

11 (Currently Amended) . At least one processor readable carrier 
medium for storing a computer program of instructions configured 
to be readable by at least one processor for instructing the at 
least one processor to execute a computer process for performing 
the method as recited in claim 1. 

12 (Currently Amended) . A system for tracing source addresses 
of packets comprising at least one network element, where the at 
least one network element comprises: 
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a processor module that identifies at least part of a 

source address of a packet^ and determines whether the at least 

part of the source address matches at least one source address 

recorded within a predetermined time period prior to arrival of 

the packet , and routes the packet if the at least part of the 

source address matches at least one source address recorded 

within the predetermined time period prior to the arrival of the 

packet ; and 

a storage module that stores the at least one source 
address recorded within a predetermined time period prior to 
arrival of the packet. 

13 (Original). The system according to claim 12, where the at 
least one source address is recorded in a hierarchical data 
structure . 

14 (Original). The system according to claim 12, where a Last 
Time Seen (LTS) value associated with each of the at least one 
source address is recorded. 

15 (Currently Amended) . The system according to claim 12, where 
the processor module is further adapted to 

route the packet if-the at least— part of the— eouree addre-ss 
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matches at least ese oourcc address recorded within fefee 

predetermined time — period prior tee — the — arrival — ef- — the — packet ; 

record an arrival time of the packet. 

16 (Currently Amended) . The system according to claim 12, where 
the processor module is further adapted toj_ 

route the packet with a warning if the at least part of the 
source address does not match at least one source address 
recorded within the predetermined time period prior to the 
arrival of the packet; and 

record the at least part of the source address and an 
arrival time of the packet. 

17 (Original) . The system according to claim 16, where the 
warning is recorded in a read-only medium. 

18 (Original) . The system according to claim 12, where the 
processor module is further adapted to issue a warning and 
discard the packet if the at least part of the source address 
does not match at least one source address recorded within the 
predetermined time period prior to the arrival of the packet. 
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19 (Original). The system according to claim 18, where the 
warning is recorded in a read-only medium. 

20 (Original). The system according to claim 12, where the 
source address of the packet is an internet protocol (IP) 
address . 

21 (Currently Amended) . A system for tracing source addresses 
of packets, the system comprising: 

means for identifying at least part of a source address of 
a packet; and 

means for determining whether the at least part of the 
source address matches at least one source address recorded 
within a predetermined time period prior to arrival of the 
packet ; and 

means for routing the packet if the at least part of the 

source address matches at least one source address recorded 
within the predetermined time period prior to the arrival of the 
packet . 
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